
Senior Internal Auditor
- Nederland
- Vast
- Voltijds
- Support Technical Audit and Assurance team in maintaining compliance with Mambu’s Technical Assurance Programs (ISO 27001, SOC 1 and SOC 2):
- Prepare teams for external certification/assurance audits
- Facilitate external certification and assurance audit sessions, work as a liaison between external audit and internal teams
- Ensure external audit findings are reviewed, recorded and support implementation of remediation measures
- Define and own audit roadmap for technology controls for Mambu platform
- Work closely with Product teams to raise awareness of compliance requirements and ensure effectiveness of internal controls and Technical Assurance Programs
- Plan and conduct internal audits based on Mambu’s annual audit plan and/or on-demand.
- Follow up and report on internal audit findings, support teams in implementing mitigation measures
- Being the contact person for questions related to Technical Assurance Programs
- Support Mambu Customers to gain trusts in Mambu’s control framework and Assurance Programs:
- Support external customers’ audits. Plan and coordinate on-site or remote audits
- Ensure external customer audit findings are addressed
- Respond to customer audit and due-diligence requests
- Educate legal and pre-sales team on existing controls and assurance programs to support pre-sales and contracting process.
- At least one relevant professional certification including CPA, CISSP, CISA, GIAC, ISO 27001 Lead Implementer or Auditor.
- A strong technical background with an understanding of product development, SaaS or Cloud environments and platform infrastructure like APIs
- Experience working with Public Cloud Platform (AWS, Azure, GCP)
- Strong written and verbal communication skills in English
- Analytical, detail oriented and creative problem-solving abilities
- Good organisational skills to manage changing priorities and ensure all tasks get addressed and expectations are met
- Proactive mindset with a drive to find and address root causes e.g. 5 Whys analysis
- Able to work autonomously, both alone and in teams
- Hands-on experience with information security and privacy compliance frameworks, controls and best practices either working as an auditor or implementing any of the following: AICPA Trust Services Principles, PCI DSS, NIST 800.53, GDPR, SOX etc.
- Previously worked in an IT, SaaS or cloud provider as an internal auditor, compliance officer, technical program manager.
- Experience in performing risk assessment workshops, analysed those risks, produced a plan to mitigate them and helped deliver those changes.
- Competitive base salary
- Company equity for all
- Learning and development opportunities
- Hybrid/Remote working (location dependant)
- 30 day working abroad
- 4 week paid sabbatical after 5 years service
- Additional benefits based on location